make sure that role is allowed to change the password